Privacy Policy
Compliance with the Digital Personal Data Protection Act, 2023 (DPDPA). Your data security is our core mission.
At EngagePro, operated by CBuddy Private Limited, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use the EngagePro program within the Bluenath ecosystem.
By using our services, you consent to the data practices described in this policy in accordance with the Digital Personal Data Protection Act, 2023 (DPDPA) of India.
1. Data Collection
We collect several types of information to provide and improve our services to you:
Personal & KYC Data
- Full Legal Name
- PAN Number (Encrypted)
- Bank Account & IFSC Details
- GSTIN (if applicable)
- Physical Address
Performance Data
- Social media metrics (via API)
- Engagement rates & Audience demographics
- Campaign ROI history
- Platform interaction logs
2. How We Use Data
Your data is processed based on the principle of legitimate purpose:
Campaign Matching
Our Oracle engine uses your metrics to match you with relevant brand campaigns.
Financial Payouts
Your bank details are used to transfer earnings and remit TDS to the government.
Compliance
KYC data is used to verify identity and prevent fraud or money laundering.
Platform Analytics
Aggregated data helps us improve the effectiveness of marketing campaigns.
3. Data Sharing
We do not sell your personal data. We only share data with authorized third parties in the following scenarios:
- 1
Advertisers
We share your public social metrics and niche classification to help them evaluate campaign fit.
- 2
Payment Processors
We share bank details with our gateway partners (PayU) to facilitate secure payouts.
- 3
Government Authorities
To comply with tax laws (TDS/GST) and regulatory audits.
4. Data Security
All KYC documents are stored in private AWS S3 buckets with restricted access. Sensitive identifiers like PAN and Bank Account Numbers are encrypted at rest and masked in all UI views except for authorized compliance officers.
5. Your Rights (DPDPA)
Under the DPDPA, you have the following rights regarding your personal data:
Right to Access
You can request a copy of all personal data we hold about you.
Right to Correction
You can update or rectify any inaccurate personal information.
Right to Erasure
You can request the deletion of your data when it's no longer needed.
Right to Withdrawal
You can withdraw your consent for data processing at any time.
6. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements (typically 7 years as per Indian tax laws).
Privacy Concerns?
Contact our Data Protection Officer (DPO) for any queries related to your data rights.
Contact Privacy Team